CVEs published December 22, 2017
35 CVEs were published on December 22, 2017: 0 critical, 0 high.
- Published
- 35
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 35
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Kazuho Oku H2O
- 4
- Huawei Technologies Co. iReader
- 3
- Huawei Technologies Co. RP200 · Huawei Technologies Co.… +3
- 3
- Huawei Technologies Co. Mate
- 2
- Huawei Technologies Co. SmartCare
- 2
- Huawei Technologies Co. AR120-S · Huawei Technologies C… +13
- 1
- Huawei Technologies Co. Baggio-L03A
- 1
- Huawei Technologies Co. FusionSphere OpenStack
- 1
- Huawei Technologies Co. HG8245H
- 1
- Huawei Technologies Co. Honor
- 1
Medium, low and unrated 35
- CVE-2017-17843An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, becau
- CVE-2017-17844An issue was discovered in Enigmail before 1.9.9.
- CVE-2017-17845An issue was discovered in Enigmail before 1.9.9.
- CVE-2017-17846An issue was discovered in Enigmail before 1.9.9.
- CVE-2017-17847An issue was discovered in Enigmail before 1.9.9.
- CVE-2017-17848An issue was discovered in Enigmail before 1.9.9.
- CVE-2017-17832ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanit
- CVE-2017-15307Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vulHuawei Technologies Co. Honor
- CVE-2017-15308Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading networkHuawei Technologies Co. iReader
- CVE-2017-15309Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths.Huawei Technologies Co. iReader
- CVE-2017-15310Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation.Huawei Technologies Co. iReader
- CVE-2017-15311The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), beforeHuawei Technologies Co. Mate
- CVE-2017-15312Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module.Huawei Technologies Co. SmartCare
- CVE-2017-15313Huawei SmartCare V200R003C10 has a CSV injection vulnerability.Huawei Technologies Co. SmartCare
- CVE-2017-15316The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software Huawei Technologies Co. Mate
- CVE-2017-15317AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008Huawei Technologies Co. AR120-S · Huawei Technologies C… +13
- CVE-2017-15318RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TEHuawei Technologies Co. RP200 · Huawei Technologies Co.… +3
- CVE-2017-15319RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TEHuawei Technologies Co. RP200 · Huawei Technologies Co.… +3
- CVE-2017-15320RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TEHuawei Technologies Co. RP200 · Huawei Technologies Co.… +3
- CVE-2017-15321Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission prHuawei Technologies Co. FusionSphere OpenStack
- CVE-2017-15322Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insuffiHuawei Technologies Co. Baggio-L03A
- CVE-2017-15324Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis Huawei Technologies Co. S12700 · Huawei Technologies Co.… +5
- CVE-2017-15328Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability.Huawei Technologies Co. HG8245H
- CVE-2017-10868H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header.Kazuho Oku H2O
- CVE-2017-10869Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors.Kazuho Oku H2O
- CVE-2017-10872H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors.Kazuho Oku H2O
- CVE-2017-10907Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier.SpiQe Software OneThird CMS
- CVE-2017-10908H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header.Kazuho Oku H2O
- CVE-2017-10909Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horSony Video & Sound Products Music Center for PC
- CVE-2017-16766An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 aSynology DiskStation Manager
- CVE-2017-17010Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gaSony Interactive Entertainment Content Manager Assistant fo…
- CVE-2017-16995The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory c
- CVE-2017-16996kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly havLinux kernel through
- CVE-2017-17840An issue was discovered in Open-iSCSI through 2.0.875.
- CVE-2017-16727A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11.Moxa NPort W2150A and W2250A